(Post courtesy Anil Malekani)
Configuration Manager 2012 is introducing a lot of changes in update deployment procedures. Most of the changes are around the "HOW" part while there are some new concepts too.
In this post I’ll talk about what some of the changes are around:
- Configuration of Software Updates components
- Deployment of software updates to endpoints
- Monitoring and tracking deployment status
Configuration of Software Updates Components
1. Software Update Point
a. If you have a Central Administration site in your design, you’ll first need to have the Software Updates Management Site role installed on your Central Administration Site (CAS) server before you install this role on any other primary site server. The CAS Software update point will work as the upstream server for all updates and all primary sites.
b. If you have a single primary site server, you can install Software update point on the same server.
2. Now you’ll find the Software Update Point configuration option under sites, Configure Site Components on the ribbon bar or if you right click on the site server
3. Supersedence Rules – helps you to control when a superseded update should be expired, so that the changes reflect accordingly on your SCCM compliance reports.
a. You can now opt to immediately expire a superseded software update
b. OR expire a superseded update after a specified time
4. Under Client Settings, Software Updates, now you’ll see an additional option to install all updates meeting deadline in a specified future time. This option will save you from multiple restarts on computers.
Software Update Deployment
1. Filter Updates – The same concept of search folders , and you can easily add a criteria from the drop down list. Save search criteria with a name and use it every next time. Very helpful for your monthly deployments for different categories of machines.
2. Software Update Groups – Same concept of Update lists, but it will also include the deployment. Saves you from going to another folder to manage deployment.
3. Automatic Deployment Rules – This is what most of SMB customers were looking for. Now you can automate your monthly patch deployments for Workstations (or even servers) as well as for Forefront Endpoint Antivirus definition updates. You can also opt to perform deployment manually, by simply doing a right click and select "Run now".
4. More controls to end users under Software Center.
Monitoring and tracking deployment status
Alerts and Deployment status summary – In console alerts save you from switching screens between console and SCCM reports to track compliance data.
Click on the View Status hyperlink and you’ll get detailed status summary.